[Samba] Permission problem with recyclebin

[lists at zxt10d.de]

Good morning everybody :)

I wanted to set-up a recyclebin on the [public]-folder, but its not 
created and I can see this in the logfile:

[2022/05/25 09:44:26.588219,  1] 
../../source3/modules/vfs_recycle.c:315(recycle_create_dir)
   recycle_create_dir: recycle: mkdirat failed for .recycle with error: 
Keine Berechtigung

smb.conf:
[global]
         hosts allow = 127. 10.8.0. 10.2.2.0/255.255.255.0 
aaa.bbb.ccc.ddd/255.255.255.0
         dos charset = 850
         unix charset = UTF-8
         store dos attributes = yes
         hide special files = yes
         hide dot files = yes

         log file = /var/log/samba/log.%m
         logging = file
         log level = 1 auth_audit:3@/var/log/samba/samba_auth_audit.log
         max log size = 1000
         printcap name = /dev/null
         realm = %UNIVERSITY%.DE
         security = ADS
         server role = member server
         template homedir = /srv/data/samba/users/%U
         template shell = /bin/bash
         username map = /etc/samba/user.map
         workgroup = %UNIVERSITY%
         idmap config * : backend = autorid
         idmap config * : range = 10000-9999999
         idmap config * : unix_nss_info = yes
         idmap config * : schema_mode = rfc2307
         map acl inherit = Yes
#        vfs objects = acl_xattr

         vfs objects = fruit streams_xattr
         fruit:metadata = stream
         fruit:model = MacSamba
         fruit:posix_rename = yes
         fruit:veto_appledouble = no
         fruit:wipe_intentionally_left_blank_rfork = yes
         fruit:delete_empty_adfiles = yes
         fruit:nfs_aces = no

[Demo]
         path = /srv/data/samba/Demo/
         read only = No

[public]
comment = Public-share
path = /srv/data/samba/public
writeable = yes
browseable = yes
public = yes
create mask = 0775
directory mask = 0775
root preexec = /batch/mkpublicdir.sh %U
# Papierkorb/recyclebin:
vfs objects = recycle full_audit
recycle:repository = .recyclebin.%u
recycle:keeptree = Yes
recycle:touch = Yes
recycle:versions = Yes
recycle:maxsize = 0
recycle:exclude = ?~$*,~$*,index*.pl,index*.htm*,*.tmp,*.temp,*.TMP,*.TEMP
recycle:exclude_dir= /tmp,/temp,/cache
recycle:noversions = *.doc,*.xls,*.ppt


Permissions:
10:00 root at R720xd:/var/log/samba# ls -l /srv/data/samba/
insgesamt 12
drwxr-xr-x 2 root %UNIVERSITY%\%AD_GROUP% 4096 24. Mai 13:56 Demo
drwxr-xr-x 3 root %UNIVERSITY%\%AD_GROUP% 4096 25. Mai 09:30 public
10:00 root at R720xd:/var/log/samba#

10:00 root at R720xd:/var/log/samba# ls -al /srv/data/samba/public/
insgesamt 12
drwxr-xr-x 3 root                     %UNIVERSITY%\%AD_GROUP%      4096 
25. Mai 08:50 .
drwxr-xr-x 5 root                     root                         4096 
25. Mai 08:50 ..
drwxrwxrwx 2 %UNIVERSITY%\%AD_USER% %UNIVERSITY%\%AD_GROUP% 4096 25. Mai 
09:15 %AD_USER%
10:01 root at R720xd:/var/log/samba#


Which user ist used to create the recyclebin when deleting a file or 
directory?


Thanks a lot, and have a nice day ;)
Torsten